Fortinet FortiMail Server Detection via IMAPS

Binary data 8735.prm...

Fortinet FortiMail Server Detection via HTTP

Binary data 8737.prm...

Fortinet FortiMail Server Detection via SSL/TLS

Binary data 8736.prm...

Fortinet FortiMail < 5.0.9 / 5.1.6 / 5.2.4 HTTP Debug Information Disclosure

The remote host is running a version of FortiMail that is prior to 5.0.9 / 5.1.6 / 5.2.4. It is, therefore, affected by an information disclosure vulnerability due to HTTP debug commands improperly dumping user credentials in the debug logs. This allows a remote, authenticated attacker to disclos...

Fortinet FortiMail Information Disclosure Vulnerability

Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. An information disclosure vulnerability exists in Fortinet FortiMail. An attacker is allowed to exploit this vulnerability to...

CVE-2015-3293

FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command...

Command injection

FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command...

CVE-2015-3293

FortiMail 5.0.3 through 5.2.3 allows remote administrators to obtain credentials via the "diag debug application httpd" command...

CVE-2015-3293

Summary: CVE-2015-3293 affects Fortinet FortiMail 5.0.3–5.2.3, where the HTTP debug command diagonally dump credentials, enabling a remote administrator to obtain user credentials via the diag debug application httpd interface. The vulnerability stems from information disclosure through HTTP debu...

Http debug commands in FortiMail exposes users credentials to admins

...

Fortinet FortiMail Web Action Quarantine Release Feature XSS Vulnerability (FG-IR-15-005) - Active Check

Fortinet FortiMail is prone to a XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Fortinet FortiMail < 4.3.9 / 5.0.8 / 5.1.5 / 5.2.3 XSS

The remote host is running a version of FortiMail that is prior to 4.3.9 / 5.0.8 / 5.1.5 / 5.2.3. It is, therefore, affected by a cross-site scripting vulnerability in the web GUI due to improper input validation within the Web Action Quarantine Release feature, specifically for the 'release'...

CVE-2014-8617

Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...

CVE-2014-8617

Cross-site scripting XSS vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to...

CVE-2014-8617

Fortinet FortiMail WebGUI is affected by a stored XSS in the Web Action Quarantine Release feature. The vulnerability (CVE-2014-8617) allows an attacker to inject arbitrary web script or HTML via the release parameter to module/releasecontrol. Affected versions are FortiMail before 4.3.9, 5.0.x b...

Fortinet FortiMail WebGUI XSS Vulnerability (FG-IR-15-005)

Fortinet FortiMail is prone to a cross-site scripting XSS vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fortimail 5.2.1 Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Reflected vulnerabilities in Fortimail version 5.2.1 II. BACKGROUND ------------------------- Fortinet’s industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW security with exceptional throughput, ultra low latency, and...

Fortinet FortiMail Web Action Quarantine Release Feature Cross-Site Scripting Vulnerability

Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail, which arises from the program's failure to adequately filter...

Fortinet FortiMail Detection (SSH Login)

SSH login-based detection of Fortinet FortiMail. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...